What WordPress.org's terms say
WordPress.org's terms of service and privacy policy have 23 rated points: 0 serious, 4 bad, 5 worth knowing and 14 good. 20 apply whenever you use the site, signed in or not; 3 only once you have an account.
Whenever you use WordPress.org
Bad 4
Third-party cookies are used for advertising
Where it says this ↗Terms may be changed any time at their discretion, without notice to you
Where it says this ↗Third-party cookies are used for statistics
Where it says this ↗You are being tracked via social media cookies/pixels
Where it says this ↗
Worth knowing 5
Your IP address is collected, which can be used to view your approximate location
Where it says this ↗This service assumes no responsibility and liability for the contents of links to other websites
Where it says this ↗Your personal data may be aggregated into statistics
Your personal data is aggregated into statistics
Where it says this ↗This service informs you that its Privacy Policy does not apply to third-party services
The service informs users that its privacy policy does not apply to third party websites
Where it says this ↗First-party cookies are used
Where it says this ↗
Good 11
This service claims that your personal data is not being sold
Your personal data is not sold
Where it says this ↗The data retention period is kept to the minimum necessary for fulfilling its purposes
Where it says this ↗Information is provided about how your personal data is used
Where it says this ↗The service will only respond to government requests that are reasonable
Where it says this ↗A list of all cookies used by the service is provided
A list of all cookies set by the website is provided
Where it says this ↗Your personal data is used for limited purposes
Where it says this ↗The service is released as free software or open-source
The service is open-source
Where it says this ↗Features of the service are available under a free software and/or open source license
Features of the website are made available under a free software license
Where it says this ↗You can request access, correction and/or deletion of your data
Where it says this ↗The service claims to be GDPR compliant for European users
Where it says this ↗You can access most of the pages on the service's website without revealing any personal information
Where it says this ↗
If you have a WordPress.org account
Good 3
Copyright license limited for the purposes of that same service but transferable and sublicenseable
Limited copyright license to Wordpress.com including for promotion
You grant a copyright license to Automattic's Wordpress.com “<strong>solely for the purpose of</strong> displaying, distributing and promoting your blog.”
Where it says this ↗You can retrieve an archive of your data
Where it says this ↗You can opt out of receiving promotional communications
You can opt out of promotional communications
Where it says this ↗
The documents
Ratings by ToS;DR volunteers; they can lag behind the current terms. Not legal advice.